Merge pull request #66 from aandryashin/master

Add resourcequota control.
aerokube · Sep 23, 2021 · 56a1880 · 56a1880
2 parents 34111f3 + 1d3fdfe
commit 56a1880
Show file tree

Hide file tree

Showing 2 changed files with 31 additions and 0 deletions.
diff --git a/moon/templates/moon.yaml b/moon/templates/moon.yaml
@@ -17,6 +17,7 @@ metadata:
   namespace: {{ .Release.Namespace }}
   name: {{ .Release.Name }}
 rules:
+{{- if .Values.moon.resourcequotacontrol }}
 - apiGroups:
   - ""
   resources:
@@ -33,6 +34,31 @@ rules:
   - update
   - patch
   - delete
+{{- else }}
+- apiGroups:
+  - ""
+  resources:
+  - pods
+  - pods/log
+  - configmaps
+  - secrets
+  verbs:
+  - get
+  - watch
+  - list
+  - create
+  - update
+  - patch
+  - delete
+- apiGroups:
+  - ""
+  resources:
+  - resourcequotas
+  verbs:
+  - get
+  - watch
+  - list
+{{- end }}
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding

diff --git a/moon/values.yaml b/moon/values.yaml
@@ -6,6 +6,11 @@ moon:
   enabled:
     resources: true
 
+  ##
+  ## Global flag to enable/disable resource quota control pod limits (by default Moon has permissions to update resourcequota)
+  ##
+  resourcequotacontrol: true
+
   ##
   ## Optionally add annotations to the service account generated byt the chart
   ## This is necessary if you intend to use the moon service account for